From 7d43a8a733b1c11c8f89c8bacdbbd7de14615f9b Mon Sep 17 00:00:00 2001
From: Julien Moutinho <julm+sourcephile-nix@sourcephile.fr>
Date: Wed, 26 Apr 2023 11:24:33 +0200
Subject: [PATCH] mermet: miniflux: fix LoadCredentialEncrypted= not supported
by EnvironmentFile=
---
hosts/mermet/miniflux.nix | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/hosts/mermet/miniflux.nix b/hosts/mermet/miniflux.nix
index 1559320..cccfd85 100644
--- a/hosts/mermet/miniflux.nix
+++ b/hosts/mermet/miniflux.nix
@@ -1,4 +1,4 @@
-{ lib, config, inputs, hostName, ... }:
+{ pkgs, lib, config, inputs, hostName, ... }:
let
inherit (config.networking) domain;
inherit (config.services) nginx postgresql;
@@ -28,7 +28,8 @@ in
WATCHDOG = "1";
WORKER_POOL_SIZE = "2";
};
- adminCredentialsFile = "/run/credentials/miniflux.service/credentials";
+ #adminCredentialsFile = "/run/credentials/miniflux.service/credentials";
+ adminCredentialsFile = "/dev/null";
};
systemd.services.miniflux = {
partOf = [ "postgresql.service" ];
@@ -38,6 +39,12 @@ in
RefuseManualStart = true;
};
serviceConfig = {
+ ExecStart = lib.mkForce (pkgs.writeShellScript "miniflux" ''
+ . /run/credentials/miniflux.service/credentials
+ export ADMIN_USERNAME
+ export ADMIN_PASSWORD
+ exec ${pkgs.miniflux}/bin/miniflux
+ '');
LoadCredentialEncrypted = [
"credentials:${miniflux/credentials.cred}"
];
--
2.47.2